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AUTOMATIC FAULT CORRECTION SYSTEM FOR 
PARALLEL SIGNAL CHANNELS 
Hugh L. Bryden, Deputy Administrator of the National 
Aeronautics and Space Administration, with respect to 
an invention of Jacob Goldberg, Palo Alto, Catlif. 
Filed Nov. 4, 1965, Ser. No. 506,908 
Int. Cl. G06f 11/00; G08b 29/00 
U.S„ Cl. 340 — 146.1 11 Claims 


ABSTRACT OF THE DISCLOSURE 

A plurality of signal -channels, each with a failure- 
susceptible element, interconnected to correct for the fail- 
ure of any one of said elements. The input signals of 15 
two different channels are transmitted through each fail- 
ure-susceptible element during two different cycles of 
operation. The transmitted signals, temporarily stored in 
storage units, are supplied to majority circuits. Each 
majority circuit, associated with a different channel, pro- 20 
vides a signal corresponding to its channel’s input signal 
as long as not more than one failure-susceptible element 
fails. 


ORIGIN OF THE INVENTION 

The invention described herein was made in the per- 
formance. 'Of work under a NASA contract and is subject 
to the .provisions of Section 305 of the National Aero- 
nautics and Space Act of 1958, Public Law 85-568 (72 30 
Stat. 435; 42 USC 2457). 

This invention relates to binary circuitry and more 
particularly to, a system for automatic correction of signal 
errors in binary signal circuitry. 

Many proposals have been made and systems devised 35 
to cope with the problem of errors occurring- in binary 
signal channels and other binary logic circuitry which 
are extensively used in data processing systems. Although 
logical elements, such as -different type gates, are subject 
to failure, they are generally much more reliable than 40 
elements such as amplifiers which are used in the various 
signal channels. Hereafter, the elements which are less 
reliable and subject to more frequent failure will be 
referred to as the signal channel elements or failure- 
susceptible elements as distinguished from the logical 45 
elements which .are .much more reliable and which 
are assumed for the present invention to be failproof. 


A further object is the provision of a relatively simple 
system for providing error-free output signals despite a 
failure of any signal channel element therein. 

These and other objects are achieved by providing a 
system in which a plurality of interconnected signal chan- 
nels, each one of which includes a failure-susceptible 
signal channel element, include a minimum number of 
signal storage elements and majority circuits. Each 
majority circuit which is associated with a different signal 
channel is supplied with signals from different groups of 
the signal storage elements selected in such a manner 
that even when one of the signal channel elements fails, 
providing an erroneous signal, the output of the majority 
circuit corresponds to the input signal of its respective 
channel. Thus the effect of the failure of the signal 
channel element is nullified, the system providing auto- 
matic correction to prevent an erroneous output signal. 

In one embodiment of the invention, automatic cor- 
rection is provided in a two independent signal channel 
arrangement by incorporating one additional dependent 
channel, the input of which is a function of the inputs 
to the other two channels. With a pair of signal storage 
elements and a single signal channel element associated 
with each channel, the two majority circuits associated 
with the two independent channels are supplied with 
signals so that irrespective of the failure of any one of 
the three signal channel elements, the output of each 
majority circuit corresponds to the input of its respective 
channel. 

In another embodiment of the invention wherein five 
independent signal channels are interconnected, the addi- 
tional channel is eliminated. Yet the majority circuit of 
each channel provides an output corresponding to the 
input to its respective channel as long as only one of the 
five signal channel elements fails at any given time. 

The novel features that are considered characteristic 
of this invention are set forth with particularity in the 
appended claims. The invention itself both as to its organi- 
zation and method of operation, as well as additional ob- 
jects and advantages thereof, will best be understood from 
the following description when read in connection with 
the accompanying drawings, in which: 

FIGURE 1 is a block diagram useful in explaining the 
principles of operations of the present invention; 

FIGURE 2 is a block diagram of one embodiment of 
the present invention; 

FIGURE 3 is a table, known as the truth table, of .the 


To prevent the possible failure of a signal channel ele- Exclusive-Or function; 
ment to result in erroneous output signals, various re- * FIGURE 4 is a block diagram of another embodiment 


dundant logic circuits have been proposed. Basically in 50 
all such circuits, redundant signal channels are employed. 
Any significant signal propagates in a plurality of similar 
channels which are so interconnected that even if a 
signal channel element fails in anyof the redundant chan- 
nels, the final output signal is nevertheless unaffected. 55 
Thus the redundant channel circuits automatically correct 
for a failure of any of the signal channel elements. 

Though various presently known redundant logic cir- 
cuits accomplish the desired results, due to .their basic 
mode of operation, namely redundancy, they require a 
large number of components and elements which greatly 
increase the size and cost of the systems in which -they 
are incorporated. Furthermore, the increased number of 
components and elements increases the problems ,of main- 
taining the systems in failure-free operating conditions. 65 

Accordingly, it is an object of the present invention 
to provide a novel system for automatically correcting 
signal errors produced in signal channels by malfunc- 
tioning signal channel elements. 

Another abject is to provide a new signal error cor- 
reeling system which requires fewer redundant channels 
than prior art arrangements. 


of the invention; 

FIGURE 5 is an expanded block diagram of a portion 
of the arrangement shown in FIGURE 4; and 

FIGURE 6 is a chart useful in explaining the operation 
of the embodiment shown in FIGURE 4. 

Attention is first directed to FIGURE 1 which is a sim- 
plified block diagram useful in explaining the principles of 
operation of the present invention. In accordance with the 
teachings of .-the invention, a .plurality .of signal channels 
A, B, and N are interconnected by means of logic stages 
li and 14. Each channel includes as input stage 15, a 
failure-susceptible signal channel element (SCE) 16, a 
storage stage 17, and a majority circuit 18. Letters A, B, 
and N are used as subscripts to designate the respective 
elements associated with each channel. 

The system diagrammed in FIG. 1 is controlled by a 
control circuit 20 to operate in a, dual cycle mode. During 
the first cycle, the signals, such as a binary “1” or .a binary 
“0,” .supplied from a signal source (not shown) to the 
input stages 15A, 15B . . . 15N are supplied, through 
the logic stage 12 to their respective signal channel ele- 
ments and therefrom to the storage .stages 17A, 17B 
. . . 17N. Then, during the second cycle of operation, 
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the output of each input stage is supplied to one of the 
signal channel elements, other than the element in its re- 
spective channel. The signal is supplied either directly or 
after being combined with the output of another of the 
input stages. The outputs of the signal channel elements 
during this second cycle are also stored in their respective 
storage stages. In FIGURE 1, solid lines represent the 
propagation paths of signals during the first cycle and the 
dashed lines represent the signals propagation paths dur- 
ing the second cycle of operation. In the rest of the figures, 
dashed lines are used to designate the propagation paths 
of signals during the second cycle only between the input 
stages and the storage stages or units. 

At the end of the second cycle, the signals stored in 
the storage stages 17A, 17B . . . 17N are supplied to the 15 
logic stage 14 wherein the signals are combined so that a 
plurality of inputs are supplied to each majority circuit 
The inputs to each circuit are a function of the signal sup- 
plied to the corresponding input stage of the same channel. 

For example, if a “1” is supplied to input stage 15A, after 20 
the second cycle of operation, the three inputs to circuit 
ISA are all “l’s” if all signal channel elements 16A, 16B 
and 16N function properly. If one of the elements fails, 
only two of the inputs to the majority circuit 18A repre- 
sent a “1.” However, since each of two out of the three 2 g 
inputs is a “1,” the output of the majority circuit A ou t rep- 
resenting the output of channel A is a “1” which corre- 
sponds to the input to the same channel. 

Reference is now made to FIGURE 2 which is a block 
diagram of one embodiment of the invention in which 30 
automatic correction is provided for two independent 
channels C and D. Each channel comprises an input stage 
25, a signal channel element 26, two storage units 27 
and 29 which together may be thought of as comprising a 
storage stage such as stage 17A of FIGURE 1. Also a 35 
majority circuit 28 is associated with each independent 
channel. Subscripts C and D are used to denote the 
various elements in their respective channels. 

The system also includes a dependent channel P, in- 
cluding an input stage 25P, a signal channel element 26P 40 
and storage units 27P and 29P. The input signals x and y, 
supplied to channels C and D respectively, are independ- 
ent of one another. However, the input to channel P is 
related to inputs x and y, supplied to channels C and D, 
by the Exclusive-Or function, expressed as z=x0y. 45 
Namely, z is a “1” when x and y differ from one another 
and z is a “0” when x and y are the same. FIGURE 3, 
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stored in units 27C, 29D and the output of gate 36 which 
is a function of the signals stored in units 27P and 29P. 
When all three signal channel elements 26C, 26D and 
26P operate properly, each of units 27C and 29P stores 
an x signal, and units 27P and 29P store a z signal and a 
y signal respectively. Thus, the output of gate 36 is ac- 
tually an x signal since z=x0y and therefore 

y0x— y0x0y=x 

Thus, all three inputs to majority circuit 28C represent x 
signals so that the output of the circuit 28C which repre- 
sents the output of channel C is an x signal, the same as 
its input signal. 

If however one of the signal channel elements is not 
functioning properly, one of the three inputs to circuit 
28C will no longer be an x signal. Yet since two out of 
the three inputs will be x signals the output of circuit 28C 
will remain unaltered, i.e. will represent an x signal. For 
example, if signal channel element 26C in channel C mal- 
functions, unit 27C may no longer store an x signal. How- 
ever, x signals will be supplied to majority circuit 28C 
from unit 29D and Exclusive-Or gate 36. Thus the output 
of circuit 28C will be an x signal even though the signal 
channel element (26C) in its channel does not function 
properly. 

Similarly, the inputs to majority circuit 28D are depend- 
ent on the input to input stage 25D of channel D and 
the proper functioning of the signal channel elements. 
When the three circuits function properly, units 27D, 
29P store y signals, which is the input to unit 25D. Also, 
the output of Exclusive-Or gate 35 is x0x0y— y. Thus, 
all three inputs to circuit 28D are y signals so that the 
output is also a y signal. Even if one of the signal channel 
elements fails, such as signal channel element 26D, two 
of the inputs to circuit 28D are nevertheless of signals so 
that the output of circuit 28D remains a y signal despite 
the failure of one of the signal channel elements. 

From the foregoing, it is thus seen that as long as only 
one of the three signal channel elements fails at least two 
out of three input signals to each majority circuit corre- 
sponds to the input signal supplied to the input stage of 
its corresponding channel. Thus the majority circuit pro- 
duces an output signal which corresponds to the input sig- 
nal of its particular channel, which represents the proper 
operation of the channel. 

In another embodiment of the invention, the need for 
an extra channel such as channel P is eliminated when at 


to which reference is made herein, represents a truth table least five independent channels are combined to pro- 

for the Exclusive-Or function. The symbol 0 will here- vide automatic correction for a faulty signal channel ele- 

after be used to represent the Exclusive-Or function. 50 ment. Referring to FIGURE 4, there are shown five in- 
The system also includes a logic stage 32 which, as terconnected channels desingated R through V. Each 

seen from FIGURE 3, operates as a multi-channel gate. channel includes an input stage 51, a failure-susceptible 

Its function is to supply the x, y and z inputs directly to signal channel elements 52, and a majority circuit 55, 

signal channel elements 26C, 26D and 26P respectively the output of which represents the channers output. Sub- 

during the first cycle of operation. These signals are then 55 scripts R through V are used to designate the various ele- 
stored in storage units 27C, 27D and 27P. Then during ments associated with each channel. Let it be assumed 
the second cycle of operation, the x, y and z signals from that input stages 51R through 51V are supplied with bi- 
stages 25C, 25D and 25P respectively are supplied through nary input signals r through v respectively, each input 

logic stage 32 to elements 26D, 26P and 26C respectively. signal either a “1” or a “0.” 

Therefrom they are stored in units 29D, 29P and 29C re- 60 As seen from FIGURE 4, the input stages 10 are con- 
spectively. Thus, if all three signal channel elements 26C, nected to the various signal channel elements through 
26D and 26P operate properly, an x signal is stored in a logic stage 56 which includes five Exclusive-Or gates 
units 27D and 29P and units 27P and 29C store a z signal. 61 through 65. Each gate is supplied with two inputs 
These signal letters (x, y and z) are shown in parentheses from another pair of input stages to perform the Exclu- 
in the various storage units diagrammed in FIGURE 2. 65 sive-Or function, the truth table of which is shown in 
Storage units 27C and 29D are connected through a FIGURE 3. Gates 61 through 65 are supplied with in- 
logic stage 34 to majority circuit 28C, while units 27D puts from stages SIR and SIS, 51S and SIT and 

and 29P are directly connected to majority unit 28D. 51U, 51U and 51V, and 51V and SIR respectively. The 

Units 27C and 29C are also connected to an Exclusive-Or outputs of gates 61 through 65 are connected to the 

gate 35, the output of which is connected to circuit 28D. 70 input of the signal channel elements 52U, 52V, 52R, 52S 
Similarly, units 27P and 29P are connected to an Ex- and 52T respectively. 

clusive-Or gate 36 which is connected to the majority The logic stage 56 is controlled by a control circuit 

circuit 28C. 58 so that during a first cycle of operation, the signals 

From the foregoing, it should be appreciated that the r through v from units SIR through 51V respectively 

output of majority circuit 28C is a function of the signals 75 are directly supplied to signal channel elements 52R 
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through 52V. If all the latter mentioned elements func- 
tion properly, signals r through v are stored in storage 
units a y c, e , g and i respectively. During the second cycle 
of operation, the outputs of the five gates 61 through 
65 are supplied to the five signal channel elements and 
stored in storage unit b, d , f, h and /. The output sig- 
nal of gates 61 through 65 may be expressed as r©j, 
j®/, r©w, «©v, and v©r respectively. Thus when ele- 
ments 52U, 52V, 52R, 52S and 52T function properly, 
these 'signals are stored in units h , /, b, d, and / respec- 
tively. The signals stored in storage units a through / are 
shown in FIGURE 4 above the output lines of the stor- 
age units which are connected to a logic stage 60. The 
function of stage 60 is to combine the various signals sup- 
plied thereto so that if all five signal channel elements 
52R through 52V function properly, the three inputs to 
each majority circuit correspond to the input signal sup- 
plied to its respective channel. Namely, the three inputs 
to circuit 55R are r signals and so on. On the other hand, 
if one of the signal channel elements malfunctions, one 
of the input signals to one of the majority circuits may 
differ from the signal supplied to its respective channel. 
However, since the other two, namely a majority of the 
input signals do correspond to the channel’s input signal, 
the output signal of the majority circuit will neverthe- 
less correspond thereto. 

Referring to FIGURE 5 wherein a block diagram of 
the logic stage 60‘ is shown comprising ten Exclusive-Or 
gates 61 through 70. The output of storage unit a is 
connected through logic stage 60 to majority circuit 55R 
as well as to one input of each of gates 63 and 69. The 
output of storage unit b is connected to one input of each 
of gates 65 and 67, while the output of storage unit c is 
directly , connected to the majority circuit 55S and to 
one input of each of gates 61 and 66. 

The output of storage unit d is connected to one in- 
put of each of gates 68 and 70 while, the output of unit 
e is connected to one input of each of gates 64 and 67 
and to majority circuit 55T. One input of each of gates 
62 and 69 is connected to the output of storage unit /. 
In a similar manner, the outputs of storage units g and 
h are connected to circuit 55U, gate 65 and 70 and to 
gates 61 and 63 respectively, while the output of gate i 
is connected to majority circuit 55V and to gates 62 and 
68, and the output of unit j is connected to one input 
of each of gates 64 and 66. The output of the pairs 
of gates 61 and 62, 63 and 64, 65 and 66, 67 and 68. and 
69 and 70 are* connected to the inputs of majority cir- 
cuits 55R through -55V respectively, whose output sigr 
nals are desingated as R 0 ut- and V ou t; -respectively. 

From the foregoing, it should, be appreciated* that the 
output signals may be represented by the following func- 
tional relationships: 


Rout™ Majority of (a, c@'h, *©/) d) 

Schit“ Majority of (c, at&h, e® j) (2) 

T out = Majority of (e, g®b, c©/) (3) 

U out = Majority of ( g } e®b, i@d) (4) 

Vout^ Majority of (/, a©/, g®d) (5) 


where a through / represent the signals stored in units a 
through j. 

When all five signal channel elements operate properly, 
the signals stored in units a through j are as diagrammed 
in FIGURE 4 so that the functional relationships may be 


expressed as: 

R out ~ Majority of (r, ^©r©5*, v©v©r) 

= Majority of ( /*, r, r ) = r ( 6 ) 

S out “Majority of ( s , r©s©r, t®s(Bt) 

—Majority of (s, s, s)—s (7) 

T out — Majority of (t, «©/©«, ^©£©0 

= Majority of (/, t, t)—t (8) 

U out — Majority of (u, r©/©w, v©«©v) 

= Majority of {u, u y u)~u (9) 

V oufc = Majority of (v, r©v©r, «©«©v) 

=Majority of (v, v, v)=v (10) 
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Thus, the output signal of each majority circuit' corre- 
sponds to the input signal supplied to its, respective chan- 
nel. 

Assuming, that one of the signal channel elements, 
such as element 52T, fails, then the signals stored Jin units 
5 e and / may be ambiguous. Representing: such signals with 
a question mark ( ? ) , the functional relationships may be 
defined as: 


Rout ™ Majority of (r, s©r©s, v©.?) 

= Majority of* ( r, r, ?) = r (11) 

S out == Majority. of (s, r©s©r, ?©s©0 

—Majority of (s, s, ?) = ^ ( 12) 

T ottfc = Majority of (?, w©f©M,^©^©?) 

= Majority of (?, t, t)=t (13) 

U out — Majority of ( u ,> ?©/©«, v©m©v) 

= Majority of ( u , ?, u)~u (14) 

Vout— Majority of* (v, ?©r, 

= Majority of (y, ?, v)— v (15) 


20 From the above relationships; it is seen* that each of 
the majority circuits is supplied with one ambiguous in- 
put signal. However, since a majority, namely two out 
of the three signals corresponds to the input to its re- 
spective channel, its output will correspond thereto. Thus' 
26 through V out will be signals r through* v which equal ' 
the input signals r through v supplied to channels R 
through V respectively. 

The teachings herein disclosed may further be exem- 
plified in conjunction with FIGURE 6. Let us assume 
30 that r, s, and t , are binary “l’s” and u and v are binary 
“0’s.” Then storage units a through / will store binary 
signals as shown in, row 1 of FIGURE 6. The input sig- 
nals to circuits 55R through 55V and. output signals 
Rout through V ou t are also shown in row 1. If however 
signal channel element 52R fails, the signals in units a 
and b are no longer binary ‘Ts” but rather binary “0’s” 
as shown in row 2. Therefore, only two input signals to 
each majority circuit correspond to the channel’s input 
4Q signal. However, the output ■ signals R<, ut through V out 
remain unaltered. Row 3 represents the signals stored and 
produced when signal channel element 52T fails. 

From, the foregoing description,; it should therefore be 
appreciated that in accordance with the- teachings of the 
present invention* a plurality of signal channels may be 
45 interconnected to provide automatic fault correction to 
prevent the failure of any . one- signal channel , element 
from resulting in error signals. As herebefore described, 
logic stages comprising- of pluralities of Exclusive-Or 
gates are used* together with majority circuits, one such 
50 circuit being included in each independent signal chan- 
nel. Each majority circuit as supplied with three input 
signals. When all failure-susceptible signal channel ele- 
ments operate properly,, the three input signals to each 
majority circuit: are the same as the input signal to the 
55 particular channel, so that the majority : circuit’s output 
signal is the same. But when one of the signal channel 
elements fails, only two input signals are the same as 
the channel’s input signal. However, since two out of 
three represents*^ majority, the majority circuit’s output 
60 > signal, representing the channels output ’ signal : is the 
same as the input signal to the channel. 

It is appreciated by those familiar with the art that 
modifications may be made in. the arrangements as shown 
without departing from the true spirit of the invention. 
65 Therefore, all modifications ^and equivalents are deemed 
to fall within the scope of the invention as claimed in 
the appended claims. 

What is claimed is: 

V A system for automatically correcting for signal 
70' errors produced in a plurality of signal channels by the 
failure of one failure-susceptible element in* one of said 
channels, the system comprising: 
a plurality of signal channels each channel including 
input means for receiving an input signal, a failure- 
75 susceptible element and a pair of signal-storing ele- 
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ments coupled to the output of the failure-suscept- 
ible element; 

a first logic stage for transferring input signals received 
by said plurality of input means to said plurality 
of failure-susceptible elements fo i storing said s'ig- r 
nals in said plurality of signal-storing elements; 
a plurality of majority circuits; and 

a second logic stage interposed between said plu- 
rality of signal-storing elements and said majority 
circuits for supplying each majority circuit associated 10 
with a different one of said channels with input 
signals which are a function of the input signal to 
its respective channel and the functioning of said 
failure-susceptible elements, whereby all the input 
signals supplied to each majority circuit correspond 15 
to the input signal supplied to its respective channel 
when all failure-susceptible elements function prop- 
erly and only a majority of the input signals supplied 
to each majority circuit correspond to the input signal 
supplied to its respective channel when one of said 20 
failure-susceptible elements malfunctions. 

2. In a multi-signal channel system wherein an input 
signal received in each channel propagates through a 
failure-susceptible element, a system for automatically 
correcting for the malfunctioning of one of said elements 25 
to provide an output signal from each channel which 
corresponds to the input signal received by the channel 
the system comprising; 

first logic means coupled to the inputs of said failure- 
susceptible elements for supplying the input signals 30 
to said elements to provide a first plurality of signals; 
means for storing said first plurality of signals; 
a plurality of majority circuits, each circuit providing 
an output signal as a function of a majority of the 
signals supplied thereto; and 35 

second logic means coupling said means for storing 
to said plurality of majority circuits to supply a 
predetermined combination of signals out of said 
first plurality of signals stored in said means for 
storing to each majority circuit, whereby all the 40 
signals supplied to each majority circuit correspond 
to the input signal of the signal channel with which 
the majority circuit is associated when all of said 
failure-susceptible elements function properly and 
a majority of the signals supplied to each majority 
circuit correspond to the input signal of the respec- 45 
tive channel when only one of said failure-suscepti- 
ble elements malfunctions. 

3. A system for automatically correcting for signal 
errors producible by the malfunctioning of one failure- 
susceptible element in one of two independent signal 50 
channels, the system comprising: 

a pair of independent channels, each channel includ- 
ing means for receiving an independent input signal, 
a failure-susceptible element for providing an output 
signal which is in a preselected functional relation- 55 
ship with the input signal supplied thereto, when 
said element functions properly, a pair of storage 
elements, each for storing therein the output signal 
provided by said failure-susceptible element, a ma- 
jority circuit for providing an output signal which 60 
is the same as the signal supplied to a majority of 
the input terminals thereof; 
a dependent channel including means for receiving a 
dependent input signal which is a function of the 
input signals supplied to said pair of independent 65 
channels, a failure-susceptible element and a pair of 
storage elements coupled to the output of the failure- 
susceptible element; 

first means for successively supplying to each failure- 
susceptible element the input signal received by its 70 
respective channel and the input signal received by 
the other of the two channels, means for successively 
supplying the output signal of each failure-suscepti- 
ble element to the two storage elements coupled 
thereto; and 75 
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second means interposed between said storage elements; 
and said majority circuits for supplying to each ma- 
jority circuit signals stored in selected ones of said’ 
storage elements, and at least one signal which is. 
a function of signals stored in two storage elements,, 
whereby all three input signals supplied to each ma- 
jority circuit correspond to the input signal received 
by the channel with which the majority circuit is. 
associated when all three failure-susceptible ele- 
ments operate properly and only two of the three; 
input signals supplied to the majority circuit corre- 
spond to the channel’s input signals when only one-- 
of the three failure-susceptible elements malfunc- 
tions. 

4. The system defined in claim 3 wherein the independ- 
ent input signals to said independent channels are x and' 
y respectively each being either a binary “zero” or a 
binary “one,” and the dependent input signal is z=x©y„ 
where © represents the Exclusive-Or function. 

5. The system defined in claim 4 wherein during a 
first cycle of operation said failure-susceptible elements; 
are supplied with the input signals x, y and z received by 
their respective channels and during a second cycle of 
operation each failure-susceptible element is supplied 
with an input signal from one of the other two channels,, 
whereby the signals received by said failure-susceptible 
elements are stored in said six storage elements when all 
three failure-susceptible elements function properly, each 
input signal being stored in a different pair of storage 
elements. 

6. The system defined in claim 5 wherein said second' 
means includes first and second Exclusive-Or gates saidl 
first gate being coupled to two storage elements wherein 
signals x and x0y are stored to provide an output signal 1 
x0x0y supplied as one input to the majority circuit asso- 
ciated with the independent channel receiving said y input: 
signal, said latter mentioned majority circuit being 
further provided with signals from the two storage ele- 
ments wherein said y input signals are stored and said 
second gate being coupled to two other storage elements 
wherein signals y and x0y are stored to provide an out- 
put signal y0x0y supplied as one input to the majority 
circuit associated with the channel supplied with said x 
input signal, and means for providing said latter men- 
tioned majority circuit with the x signal stored in two of 
said storage elements. 

7. The method of automatically correcting for signal 
errors produced in a plurality of signal channels due 
to the failure of one failure-susceptible element in one 
of said channels, to correctly transmit input signals there- 
through, each input signal being associated with a different 
one of said channels, the steps comprising: 

transmitting the input signal of each channel through 
its respective failure-susceptible element; 

storing the input signals transmitted through the plu- 
rality of failure-susceptible elements in a first plu- 
rality of storage elements; 

transmitting the input signal which is supplied through 
the failure-susceptible element of a channel other 
than the channel with which the input signal is 
associated; 

storing the signals transmitted through said failure- 
susceptible elements in a second plurality of storage 
elements; and 

utilizing signals stored in different ones of the storage 
elements in said first and second pluralities of storage 
elements to provide for each channel an output sig- 
nal which corresponds to the input signal of the re- 
spective channel when not more than one of said 
failure-susceptible elements malfunctions. 

8. A method of automatically correcting for signal 
errors producible by the malfunctioning of one failure- 
susceptible element in one of five independent channels, 
the steps comprising: 

transmitting the input signals of said five channels 
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through their respective failure-susceptible elements 
during a first cycle; 

storing the signals transmitted during said first cycle 
in a first plurality of storage elements; 

combining pairs of input signals of different channels ^ 
to produce five signals each being a function of a 
different pair of input signals; 

during a second cycle, transmitting through each failure- 
susceptible element one of said signals which is a 
function of the input signals of two channels other jq 
than its respective channel; 

storing the signals transmitted during said second cycle 
in a second plurality of storage elements; 

producing signals each of which is a predetermined 
function of two signals stored in two storage elements 15 
in said first and second pluralities of storage ele- 
ments; and 

utilizing the last produced signals and the signals stored 
in said first plurality of storage elements to form five 
groups, each group including three signals and being 20 
associated with a different one of said five channels, 
at least a majority of the three signals in each group 
corresponding to the input signal of the channel 
with which the group is associated when at least 
four of said five failure-susceptible elements function 25 
properly. 

9. The method defined in claim 8 wherein in said step 
of combining the input signals of two adjacent channels 
are combined to produce a signal which represents the 
Exclusive-Or function of the two signals, 
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10. The method defined in claim 9 wherein each group 
of three signals at least two of the signals corresponds 
to one of the input signals when not more than one of 
said failure-susceptible elements malfunctions. 

11. In a multichannel system wherein an input signal 
received by each channel propagates through a failure- 
susceptible element, the method of automatically correct- 
ing for the malfunctioning of not more than one failure- 
susceptible element, the steps comprising: 

propagating through each failure-susceptible element the 
input signal supplied to its corresponding channel 
during a first cycle and a signal which is a function 
of at least the input signal of one other channel 
during a second cycle; 

storing the propagated signals in storage elements; and 

utilizing the stored signals in groups to provide a 
group signal representing the signals of a majority 
of the signals in each group comprising of three 
signals, at least two of three signals in each group 
corresponding to a different one of the input signals 
when not more than one of said failure-susceptible 
elements malfunctions. 
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